Archive
June 2006
Vulnerabilities first published in this month (UTC), newest first.
646 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in Cescripts Realty Home Rent allows remote attackers to inject a…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in FullPhoto.asp in WS-Album 1.1 and earlier allow remote attackers…
-
Unscored —
Integer overflow in wv2 before 0.2.3 might allow context-dependent attackers to execute arbitrary code via a crafted Mi…
-
Unscored —
artswrapper in aRts, when running setuid root on Linux 2.6.0 or later versions, does not check the return value of the …
-
Unscored —
KDE Display Manager (KDM) in KDE 3.2.0 up to 3.5.3 allows local users to read arbitrary files via a symlink attack rela…
-
Unscored —
Cross-site scripting (XSS) vulnerability in horde 3 (horde3) before 3.1.1 allows remote attackers to inject arbitrary w…
-
Unscored —
zend_hash_del_key_or_index in zend_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zend_hash_del to delete th…
-
Unscored —
Unspecified vulnerability in the session extension functionality in PHP before 5.1.3 has unknown impact and attack vect…
-
Unscored —
Unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors, related to "certain c…
-
Unscored —
The imap_header function in the IMAP functionality for PHP before 4.3.0 allows remote attackers to cause a denial of se…
-
Unscored —
The php_if_imap_mime_header_decode function in the IMAP functionality in PHP before 4.2.2 allows remote attackers to ca…
-
Unscored —
The IMAP functionality in PHP before 4.3.1 allows remote attackers to cause a denial of service via an e-mail message w…
-
Unscored —CVE-2003-1303 EPSS 12%
Buffer overflow in the imap_fetch_overview function in the IMAP functionality (php_imap.c) in PHP before 4.3.3 allows r…
-
Unscored —CVE-2006-3015 Public exploit
Argument injection vulnerability in WinSCP 3.8.1 build 328 allows remote attackers to upload or download arbitrary file…
-
Unscored —CVE-2006-3009 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Open Business Management (OBM) 1.0.3 pl1 allow remote attackers …
-
Unscored —
Multiple SQL injection vulnerabilities in Open Business Management (OBM) 1.0.3 pl1 allow remote attackers to execute ar…
-
Unscored —CVE-2006-0025 EPSS 49%
Stack-based buffer overflow in Microsoft Windows Media Player 9 and 10 allows remote attackers to execute arbitrary cod…
-
Unscored —CVE-2006-0022 EPSS 15%
Unspecified vulnerability in Microsoft PowerPoint in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP1 and SP2,…
-
Unscored —CVE-2006-1303 EPSS 38%
Multiple unspecified vulnerabilities in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allow remote attacke…
-
Unscored —CVE-2006-1313 EPSS 29%
Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me,…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Ac…
-
Unscored —CVE-2006-2374 Public exploit
The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 a…
-
Unscored —CVE-2006-2384 EPSS 19%
Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to conduct spoofing and phishing att…
-
Unscored —CVE-2006-2385 EPSS 20%
Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows user-assisted remote att…
-
Unscored —
Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Serv…
-
Unscored —CVE-2006-2378 EPSS 35%
Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1…
-
Unscored —
Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and ea…
-
Unscored —CVE-2006-2380 EPSS 18%
Microsoft Windows 2000 SP4 does not properly validate an RPC server during mutual authentication over SSL, which allows…
-
Unscored —CVE-2006-2382 EPSS 49%
Heap-based buffer overflow in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to exe…
-
Unscored —
Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to exec…
-
Unscored —CVE-2006-2371 EPSS 23%
Buffer overflow in the Remote Access Connection Manager service (RASMAN) service in Microsoft Windows 2000 SP4, XP SP1 …
-
Unscored —
The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 a…
-
Unscored —
Buffer consumption vulnerability in the tempnam function in PHP 5.1.4 and 4.x before 4.4.3 allows local users to bypass…
-
Unscored —CVE-2006-2376 EPSS 41%
Integer overflow in the PolyPolygon function in Graphics Rendering Engine on Microsoft Windows 98 and Me allows remote …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in SHOUTcast 1.9.5 allow remote attackers to inject arbitrary HTML …
-
Unscored —CVE-2006-3006 Public exploit
Cross-site scripting (XSS) vulnerability in iFoto 0.20, and possibly other versions before 0.50, allows remote attacker…
-
Unscored —
The JPEG library in media-libs/jpeg before 6b-r7 on Gentoo Linux is built without the -maxmem feature, which could allo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in search.php in OkScripts OkMall 1.0 allow remote attackers to inject arbitra…
-
Unscored —
details.php in Easy Ad-Manager allows remote attackers to obtain the full installation path via an invalid mbid paramet…
-
Unscored —
Cross-site scripting (XSS) vulnerability in details.php in Easy Ad-Manager allows remote attackers to inject arbitrary …